chown root /var/log/audit/*